Show HN: CRXcavator, but Better

Category: security

Tags: security, browser-extensions, threat-detection, code-analysis, llm

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 4, Utility: 7)

This project provides enterprise-grade security analysis for browser extensions by performing deep code analysis and LLM-powered threat detection instead of relying solely on manifest permissions. It's interesting because it shifts from permission-based flagging to behavioral analysis, catching obfuscated and novel malicious behaviors that traditional scanners miss.

Target audience: devops, security-engineers, enterprise-it

Repository: https://amibeingpwned.com

View on Hacker News